Differentiated kdc lists

[Russ Allbery]

Henry B Hotz <hotz at jpl.nasa.gov> writes:

> I have to support clients behind firewalls that may air-gap.  I'm
> providing slave kdc's in those areas, so functionality will exist, but.
> . .

> It would be nice if I could use a single krb5.conf and somehow specify
> "if you're over here, use these kdc's".  That e.g. allows keeping the
> krb5.conf file in AFS, but also just simplifies writing set-up
> instructions.

Can you do this with DNS SRV records?

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>